Node runner using the project's postgres dependency, for applying SQL migrations where psql is unavailable. Reads POSTGRES_URL via --env-file; runs the file in a single transaction.
- note generate-key 2-min reclaim vs reconcile 10-min report split - comment intentional >=/> asymmetry in the kill-switch re-check - document getCurrentGithubIdentity throw path and ProvisioningError status
- Next.js 15 App Router (JS+JSDoc): landing, auth-gated dashboard, docs - GitHub OAuth via Supabase; identity anchored on numeric provider_id - key provisioning: reserve-then-mint-persist-compensate, one key per account - api_keys in unexposed llmapikey schema via direct Postgres; RLS deny-all - live minting gated behind PROVISIONING_ENABLED; Vercel auto-deploy disabled - unit tests (mask, request-body), RLS deny-all test, reconcile script